IoC Extractor

This IoC extractor identifies Indicators of Compromise (IoCs) by matching patterns, without analyzing the context of the surrounding text. Manual Review and Validation of the extracted IoCs are essential before any action is used.

Amazon-themed campaigns of Lazarus in the Netherlands and Belgium

DATE : 2022-09-28T07:00:00
SOURCE : welivesecurity.com

CVE:
cve-2021-21551

FILE_HASH_MD5:
BE93E050D9C0EAEB1F0E6AE13C1595B5

FILE_HASH_SHA1:
735B7E9DFA7AF03B751075FD6D3DE45FBF0330A2
5F4FBD57319BD0D2DF31131E864FDDA9590A652D
001386CBBC258C3FCC64145C74212A024EAA6657
296D882CB926070F6E43C99B9E1683497B6F17C4
569234EDFB631B4F99656529EC21067A4C933969
4AA48160B0DB2F10C7920349E3DCCE01CCE23FE3
C71C19DBB5F40DBB9A721DC05D4F9860590A5762
97DAAB7B422210AB256824D9759C0DBA319CA468
FD6D0080D27929C803A91F268B719F725396FE79
83CF7D8EF1A241001C599B9BCC8940E089B613FB
C948AE14761095E4D76B55D9DE86412258BE7AFD
085F3A694A1EECDE76A69335CD1EA7F345D61456
55CAB89CB8DABCAA944D0BCA5CBBBEB86A11EA12
806668ECC4BFB271E645ACB42F22F750BFF8EE96
BD5DCB90C5B5FA7F5350EA2B9ACE56E62385CA65

Domain:
thetalkingcanvas.com
aquaprographix.com
turnscor.com
gonnelli.it
stracarrara.org
eset.com
clearsky.com
sentinelone.com
securelist.com
hvs-consulting.de
vblocalhost.com
mandiant.com
blogs.jpcert.or.jp
doi.org

Url:
https://thetalkingcanvas.com/thetalking/globalcareers/us/5/careers/jobinfo.php?image=<
https://aquaprographix.com/patterns/Map/maps.ph
https://turnscor.com/wp-includes/feedback.php
https://www.gonnelli.it/uploads/catalogo/thumbs/thumb.a
https://turnscor.com/wp-includes/feedback.ph
http://www.stracarrara.org/images/img.a